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10. ARITHMETIC PROCESSOR PAGING 

10.1 Introduction 

BBN is designing an interface between the KA-10 arithmetic 
processor and core memory which we call the Pager . This 
device receives from the APR over a standard memory buss 
execute, read, write, and read-modify-write requests. It 
then maps the incoming virtual address into an appropriate 
real core address (provided the request is legal) and passes 
the request to the memory modules over another standard memory 
buss. The mapping requires about 150 nsec. 

The paging hardware performs the following functions: 

(1) Independently maps each 512-word block (or page) 
of the 262,iM-word virtual address space into an 
absolute core location, or, if the block is not 
currently in core, traps to a core managing 
program . 

(2) Provides independent protection for each 512-word 
page in the read, write, and execute modes. 

(3) Records statistics in a Core Status Table which 
are useful to the core management program. 

The principal advantage of paging over the current dual- 
protect-and-relocate scheme incorporated in the KA-10 is 
that each process is provided with a large, constant 
262, 144-word virtual machine, yet requires only those pages 
which are referenced during an Interaction to be in core. 
This can significantly reduce the core memory requirements of 
running programs. 

10.2 Mapping 

It is presently impractical to keep mapping information for 
all 512 pages of a virtual address space in hardware because 
of the quantity of hardware required. For this reason, a 
limited number (16 originally, expandable to 32) of asso- 
ciative hardware registers are employed and the mapping 
information is kept in 512-word Page Tables in core memory. 
The manner in which virtual addresses are mapped into real 
addresses is shown in Figure 10-1. 

Whenever a page not mapped by the associative registers is 
referenced, the pager initiates a loading sequence (requiring 
about three memory cycles) during which the appropriate page 
table entry is referenced and an associative register loaded 
with the required mapping information. Associative registers 
are reloaded in a round-robin fashion. We hold the theory 
that a program's memory references will be sufficiently 
"collected" that 16 mapping registers are enough to prevent 
too frequent reloading. 
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Prom Processor 



Inside Pager 



Priority Interrupt^ v 
Cycle J* 

Key Cycle (When 
Examine or 
Deposit switch 
is pushed on 
computer 
console) 




Indirect Address 
Fetch 



>-* 



Read Level (R) 

Write Level (W) 

Execute Level (E) 

Monitor Mode j 

9 Highest Bits off * 
18 Bit AddressJ 



9 Lowest Bits of \ te 

18 Bit Address/* 



These three levels 
are used when a 
trap condition 
arises, but not in 
the association 
process itself. 



These levels are 
tested against the 

permission bits in— 

each Associative^ 
Register (e.g., R+RP). 

These levels are tested 
for equivalence with 
the corresponding bits 
in each Associative 
Register. 



? 



To Memory (when 
a match is found) 



•Read Level (R+E) 
►Write Level (W) 



■f 



\ 



Highest Bits 
of Absolute 
Address 

Lowest Bits 
of Absolute 
Address 



Self-loading 
from page table 
entry when no 
match is found 



Virtual Page 
Number — 9 Bits 


1 


1 


1 


1 


1 ..I i 

Absolute Page Number 
11 Bits 



execute Permission (EP) 
Write Permission (WP) 
Read Permission (RP) 
Monitor Mode 



Figure 10-1 
Mapping From Virtual to Absolute Addresses 
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As shown in Figure 10-2, which page table is referenced 
during the loading sequence depends upon the memory request. 
There is one page table for user mode requests and three 
possible partial page tables for monitor mode requests. The 
^Locations of the monitor mode page tables are as follows: 

First APR's Map 3100g to 3177q) 

Second APR f s Map 3000 g to 3077g> Absolute locations 

Common Map 3200« to 3677, 

Private Map 700g to 777g of the Process State Page 

The locations of the user mode page table and of the process 
state page are loaded into the pager when processes are 
switched, as described later. 

10.3 Switching Processes 

The IOB reset pulse generated by CONO APR, 200000 causes the 
pager to clear itself. Thereafter, the pager may be 
switched from one process to another by first storing an 
appropriate word in location 71 o and then executing CONO 24 , 
xxx. The pager does not interpret any of the effective 
address bits of the CONO and will not respond to any other I/O 
instructions (except IOB reset). When CONO 24, xxx is 
received, the pager will complete the page number dump for the 
old process (described later), clear itself, and reload its 
base registers from 7ig. This Is shown in Figure 10-3. 
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User Mode 



*0. 



T77TTX, 



16 K 



T 



16 K 



16 K 



16 K 



16 K 
16 K 
16 K 



Although processes 
may operate In 
environments as 
large as 256 K, 
y the Upper Bound 
Register may be 
set to exclude 
all memory refer- 
ences above 16, 
32, i»8, 64, 80, 
96, or 112 K. 
Processes not requiring 
a large virtual address 
space may achieve economy 
by using the Upper Bound 
Register and merging the 
User Mode page table into 
the top of the StaUPage., 

The number or 
overhead pages required 
is then reduced from two 
to one. 



Monitor Mode 



32 K 



32 K 



Unmapped area 
Absolute addresses 



32 k Ma PP ed individually 
per Processor 



Mapped commonly 
for all processes 
and all processors. 
Non-resident in- 
formation in the 
160 K Exec and Monitor 
is referenced via 
this map. The map 
itself is in the 
unmapped core area. 
between 3200 fl and 
3700 8 . ° 



Mapped privately 
Ter process ^ 



Figure l0.-2L 
Mapping of Virtual Addresses 
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CONO 24, xxx causes the Pager to reload its main registers 
as follows: 

1. Read absolute location 71g, interpreted as below. 



I xx 



jj. 



11 bits 



5 Bits 



11 Bits 



MBR (Monitor Base Register) 
Location of the Process 
State Page, 



DP (Dump Pointer) 
The location (MBR) •6i*0 g -f(DP) • 
is where the next four-byte 
Associative Register dump will go. 



DB (Dump Bit) 

Enables the dumping feature 



UBR (User Mode Base Register) 
The location of the User Mode 
page table. 



UPR (UPper Bound Register) ] 000 
Limits legal virtual addresses I 001 
to the first 16K, 32K, 48K, 64KJ 010 
80K, 96K, or 112K. oil 

J 100 
101 
110 

2. Read location (MBR)-640g. 1X1 



No restriction 
112K restriction 
96K restriction 
80K restriction 
64K restriction 
48K restriction 
32K restriction 
16K. restriction 



9 Bits 



9 Bits 



17 Bits 



PUR (Process Use Register) 



AQER (AGE Register) 



Pigure io-3 
Initializing the Pager For a New Process 
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10.4 The Self-Loading Sequence 

When a memory request is not mapped by an associative 
-register, the pager enters its self-loading sequence. This 
Consists of the following steps. 

(1) Reading an appropriate page table entry! 

(2) Checking read, write, and execute pro- > Figure 10-4 
tection bits for access violation. 

(3) Checking the directed trap bits for 
trap conditions. 

(4) Tracking down shared and indirect 
pointers to determine the absolute }* Figure 10-5 
address of the page and trapping if 
the page is not in core. 

(5) Modifying the Core Status Table entry 1 
corresponding to the core address of y Figure 10-6 
the page and trapping if the page field [ 

is less than 20 g . ) 

(6) Dumping the last three and the current nine-bit 
virtual page numbers every fourth time a 
user-mode page is loaded into an associative 
register (only when the dumping feature is 
enabled). These four nine-bit bytes are stored 
in the Process State Page at location 6M0 g + 
contents of the dump counter register. Tne 
dump counter is a 28-positlon counter that 
assumes values between k and 37o, so that the 
dump is actually into the regioH 64M ft to 677o. 

i 

Dumping a record of the last 112 user-mode 
pages loaded into the associative registers 
(not necessarily all different pages, however, 
because the pager may reload the same page 
several times). By means of this record the 
working set of a process may be swapped in 
quickly following rescheduling. 
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Address Control Field — Determines the format of the 22 bit 

address field 
Read 
Write 
Execute 



Access Permitted to page 



•Hybrid or Display Processor^ 

Directed traps and loading information 



Address of this page — 22 bits 



*-r-f 



*Thls bit not currently assigned 
Access trap bit 



Trap 



to Monitor — /l0«trap i 

*01»trap a 

ip bit 111 and 00 



mmedlately 
after loading A.R. 
« don't trap 



Copy trap 
Trap to User bit 
ftut in SPT (if indirect) or put on drum (if private} 
*Load adjacent pages when loading this one 



Shared Page Number 
13 bits 



Unused 
9 bits 







Active File Number 
13 bits 



Page Number 
9 bits 



This last pointer format should not be encountered 
by the paging hardware; it is used only on inactive 
files. The Monitor converts entries of this type 
to shared or indirect pointers when the file is 
activated. 

Figure -' 10-^1 
Format of Page Table Entries 
I. Private pointers 
II. Shared pointers 
III. Indirect pointers 
IV. Indirect file pointers 













1 


1 




Master File Number 
18 bits 


Pape Number 
9 bits 



* These bits are ignored by the pager 
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4000 



8 



Absolute 
Page No. 



10000 



8 



CORE STATUS 
TABLE 

wwV 

NAAA/VI 



>*l 



9 Bits 



AGER 



\ 



\ 



\ 



19 



Core Status Table Entry 
17 18 19 



9 Bits 



^ 



1^ 



17 Bits 



- M»i»P»c»"K©#» 



8;9 



17 \/ 19 



35 



9 Bits 


9 Bits 


17 Bits 



PUR 



1. Bits 0-8 of AGER replace Bits 0-8 of CST entry. 

2. Bits 9-17 and 19-35 are "ORed" into Bits 9-17 and 19-35 
of CST entry. 

3. Write request level is "ORed" into Bit 18 of the CST 
entry (If the write is permitted) 



Figure 10-6 
Pager References to the Core Status Table 
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If no trap condition occurs during self-loading, an 
associative register is loaded with the required mapping 
information and the pager proceeds. Note, however, that the 
write permission bit in an associative register is set only 
When both the modification bit in the Core Status Table and 
the write permit bit in the page table entry are set. 

10.5 Pager Traps 

A paging trap will occur whenever one of the following 
events happens: 

1. The trap bits. in the process page table force a 
trap. 

2. The addressed page (or indirecting page table) 
is not in core. 

3. An illegal condition is detected. 

4. The Core Status Table entry for an addressed 
page contains an age less than 20n (meaning that 
the core manager is controlling tne page). 

When one of the above conditions happens, the pager first 
stores the cause and location of the trap into the Process 
State Page at location 6*J2g. The format of this word is 
shown in Figure 10-7. Then, if the APR operation in progress 
was a write, it stores the data into location 6*l3o of the 
state page . Finally, it forces the APR to execute absolute 
location 70«. Location^ 70« should contain a JSYS instruc- 
tion to a trap routine. 

The arrangement of the Trap Cause field was chosen so that 
decoding of the cause could be easily accomplished by the 
JFFO instruction. 

To restart a process which was terminated by a pager trap, 
the following information is of value: 

1. The program counter (PC) saved by the JSYS in 
location 70g is correct. 

2. If the read or execute bits in 6^2g of the state page 
are set, restart is completed by perfo rming a JRSTF 
to the first location of the trap routine. 

3. If the read bit is not set but the write bit is set 
in 6*J2q, the data in 6^3o must- be written into the 
effective address of 642o before returning control 
to the process via JRSTF. 
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A sample program to restart a process which was terminated 
by a paging trap is given below: 



BEGIN 



MONWR 



C0N0 2*4 ,0 

MOVE 1,777642 
TLNE 1,12 
JRST BEGIN 
MOVE 7776*43 
TLNE 1,1 
JRST MONWR 
UMOVEM (1) 
HRLZI 17,777620 . 
BLT 17,17 • 
JRSTF«T776lll 

MOVEM (1) 
JRST BEGIN 



LOAD PAGER WITH NEW BASE REGISTERS 
UPPER BOUND REGISTER, AND DUMP REGISTER 
GET TRAP STATUS WORD 
SKIP IF NEITHER READ NOR EXECUTE BITS SE 

GET DATA WORD 
SKIP IF USER MODE 

COMPLETE USER MODE WRITE 
RESTORE AC'S FOR THE PROCESS 

RESUME PROCESS ( JSYS IN LOCATION 70« 
SAVES THE FLAGS AND PC IN 777641). ° 
COMPLETE MONITOR MODE WRITE 



f 



In Figure 10-7 the function of the PI cycle, Key Cycle^^nO^, 
Indirec t Address Seq uence bits mav not be clear v^Trna^Tng^ 
trap should not occur during a PI cycle, if the time-sharing 
software is coded properly since it is impossible to recover 
from such a trap. The function of this bit is to notify the 
software that a disaster has occurred so that crash recovery 
may be attempted. Key Cycle traps will not occur very often 
under time-sharing, but we would like to be able to handle j 
them since someone may wish to examine or deposit in to the J 
l non-resident portion of the Monitor's address space./ The 
Indirect address sequence bit Is used to distinguish data 
reads of non-existent memory from Indirect addressing reads 
of non-existent memory. In the former case, the software may 
wish to create new memory and proceed, but in the latter case, 
a programming error has been made. 



i°»6 Core Management Philosophy 

Core management for processes with large virtual address 
spaces can prove to be a significant problem. To minimize 
difficulties we have designed into the Pager several features 
(Figure 10-6). 

(1) Recording modification 

Because a write request will set the modified bit 
in the Core Status Table, core-to-drum swaps need 
be performed only for pages with this bit set. 
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TRAP STATUS WORD 



10 



11 Bits 



Trap Cause 
(See Below) 



11111 



18 Bits 



I 



Effective address of paging 
trap 

MM (Monitor Mode) 

E (Execute request) 

(Write request) 

lR (Read request) 

-pi (Indirect address sequence in progress) 

IPI (Priority Interrupt cycle in progress) 

KEY ( KEY cycle in progress — console Examine 
or Deposit switch pushed) 



Interpretation of the Trap Cause Field: 



& 



2 
3 

5 
6 

7 
8 

9 
10 



1 Copy Trap (Bit 9 set in Page Table entry 

2 User Trap (Bit 8 set in Page Table entry) 

3 Immediate Monitor Trap (Bits 9-10«10 in Page Table entry) 

4 Illegal Read (Bit 2«0 in page table and read request) 

5 Illegal Write (Bit 3-0 in page table and write request) 

6 Illegal Execute (Bit 4«0 in page table and execute request 

7 Access Bit not set (Bit 12-0 in page table entry) 

8 Upper Bound Register Exceeded 

9 Memory request not serviced ;within 70 ysec 



Indirect 



} 



Not in core 



2 Private 

3 Shared 
M Page Tabl< 

5 Excessive (Double indirecting is not permitted) 
10 Illegal 



Not in core 



in Core Status entry) 
in Core Status entry) 



Private) 

Shared J 

On Replacement Queue (Bits 0-6*0 

Drum Write Requested (Bits 0-6=1 

Not yet in core (but swap-in requested) 

(Bits 0-6«2 in Core Status entry) 
Blocked by core manager (Bits 0-6*3 in Core Status entry) 
Monitor after-loading trap (Bits 9-10"01 In page table entry) 
Parity error 
Illegal pointer format (Bits 0-l«li in page table entry) 



Figure 10-7 
Trap Status Word Format 
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Identifying Proc e sses using a page 
By loading the process use register (PUR) with a 
bit Identified with the current process the Core 
Status Table entry for each page will contain a 
record of the processes which have used each page, 
the core management program can then discriminate 
pages in use by active processes from those which 
were used by processes now inactive. 

( 3 ) Marking time-of- last-ref e rence 

When a large process is compute bound, its "working 
set" will frequently change with time. By 
periodically incrementing the age register, the 
core manager can look at the Core Status Table and 
distinguish recently referenced pages from ones 
not referenced for a long time. The latter are 
likely to be outside current working sets and are 
good candidates for replacement by new pages. 

( 4 ) Recording the working set of a process 

By examining the nine-bit page numbers dumped by 
the pager into the region 6Mo to 677o» tne core 
manager can make a good guess about tne current 
working set of the" process. If the process was 
rescheduled and swapped out of core, it may be 
reasonable to preload these pages into core before 
next scheduling the process. 

( 5 ) Provide for dua l- processor operation 

Because one APR may be computing for a process, 
while the other APR is tampering with the Core 
Status Table, we have included a special check in 
the paging hardware for ages less than 20«. When 
the software is about to examine some entry in the 
Core Status Table, > it may EXCH a word with the 
left-most five bits « for the Core Status Table 
entry. This will prevent the other APR from 
inadvertently loading this page during the 
examination. 
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10. ARITHMETIC PROCESSOR PAGING 

10 • 1 Introduction 

BBN has implemented a device called the BBN Pager which is 
connected between the KA10 (PDP-10 arithmetic processor) 
and the KA10 T s memory port. In conjunction with a set of ' 
hardware modifications to the KA10, the BBN Pager changes 
the core memory mapping mechanism such that core memory 
is allocated and protected in 512 word pages. The address 
space of the machine is mapped for EXEC mode as well as 
USER mode with the BBN Pager. The paging mechanism can be 
bypassed by executing a specific CONO to the pager or by 
executing (or depressing) IOB reset to invoke a so called 
"transparent mode" for the running of the standard DEC 
monitors or diagnostic software. 

10.2 The Associative Mapping Process 

When mapping is enabled in the pager, the 9 high order 
virtual address bits, state of the EXEC/USER mode flip 
flop, and type of request (read, write, execute) from the 
KA10 are compared and tested with the contents of 1 to 5^ 
(depends on pager configuration) associative registers. 
This comparison is performed on all associative registers 
simultaneously. If a match is found, the particular as- 
sociative register containing the match also contains 
11 bits which become the high order 11 bits of the real 
core address (hereafter abbreviated as R.C.A.).** The use 
of 11 R.C.A. high order bits permits the KA10 
to reference up to 1024K* words of memory. In this simple 
case, the overall delay directly attributed to the pager 
is about 100 nanoseconds plus cable delay. The simple case 
is represented by Figure 10-1. 



*K=102^ words 

** A glossary of terms Is presented at the end of this section 
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From KA10 



Inside BBN Pager 



Priority Inter-^ 
rupt Cycle j 

Key Cycle (WherJ 
Examine or 
Deposit Switch, 
is pushed on 
computer 
console) _j 

Indirect Addres^L 
Fetch i 

Read Level(R) 



-e> 



These three levels are 
used when a trap con- 
dition arises, but not 
in the association 
process itself. 



Write Level(W)— 
Execute Level(E)^ 

EXEC/USER Mode 



9 Highest Bits 
of 18 Bit 
Address 

9 Lowest Bits 
of 18 Bit 
Address 




These levels are 
tested against the 
permission bits In 
each Associative 
Register 

These levels are tested 
for equivalence with the 
corresponding bits in 
each Associative Register. 



To Memory (When 
a match is found) 



■> Read Level (R+E) 



^ Write Level (W) 




11 Highest Bits 
of Absolute 
Address 

9 Lowest Bits 
of Absolute 
Address 



Bits in Associative Registers 



Virtual Page 
Number — -9 Bits 



Absolute Page Number 
11 Bits 



Execute Permission (EP) 
Write Permission (WP) 
Read Permission (RP) 
USER Mode (0 for EXEC Mode) 



Figure 10-1 
Mapping From Virtual to Absolute Addresses 
(Simplest Case, Match Found in Associative Register) 
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10. 3 USER Mode Mapping when the Association Fails 

When a match is not found in an associative register (hereafter 
abbreviated as A.R.), the pager begins a self-loading sequence 
which basically involves the loading of an A.R. from infor- 
mation found in one or more tables in core memory. The 
particular A.R. to get self-loaded is determined in a very 
simple cyclic fashion. That is, if the last A.R. loaded was 
A.R. 5, the next to be loaded will be A.R. 6(if it exists; > 
if not, the next existing A.R. in the cyclic sequence is used) 
... The average pager is configured with 16 A.R.'s which 
means that if the program confines most of its references to 
an 8K or less working set, self-loading will be invoked 
infrequently. 

The first stage of the self-loading sequence involves reading 
some information from a table in core memory called the page 
table (hereafter abbreviated as P.T.). This table is 512 
words long and is itself a page which may be anywhere in core 
memory. The origin of the P.T. is specified by the contents 
of a register in the pager called the User Mode Base Register 
(hereafter abbreviated as U.B.R.). The 11 bits of the U.B.R. 
are used as the 11 high order address bits and are concaten- 
ated with the original 9 high order address bits (on which the 
association failed) to reference the appropriate word in the 
P.T. 

The word which is read from the page table is of one of four 
types as determined by bits and 1 of the word. These types 
are: 

00 private page 

01 shared page pointer 

10 indirect page pointer 

11 illegal format 



10.3.1 Private Page 

In the simplest case of a private page type, the rightmost 11 
bits contain the high order R.C.A. bits and bits 2-4 contain 
the read, write, execute access information which are used to 
self-load an associative register. The private page entry 
has many options which are detailed in Figure 10-2. 
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Entry type code 00 , Private Page 



Read 
Write 
Execute 




Access Permitted to Page 



Directed Traps and Loading Information 
5 6__. X 13 14 



* * 



^ 



35 



J L 



Location of this page — 
22 bits 



Access permission bit 

— Trap to Monitor — ll=trap immediately 

10=trap after loading A.R 
01=and 00 - don't trap 

Trap on write or read- 
-modify-write reference 
(useful to make private 
copy of a page) 



-Trap to User bit 



*not used by Pager hardware 

Figure 10-2, Private Page Entry in P.T. 
Most of the option bits cause traps to occur which cause 
the KA10 to take some special action when a page is 
referenced in a particular way. 
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10.3.1.1 The Location Field 

The location field is 22 bits wide. This permits the speci- 
fication of where a page really is in primary, secondary, or 
even tertiary storage. If bits 14-17 are all f s, the right 
most 11 bits contain the high order R.C.A. bits. If any of 
bits 1*1-17 are set, a page not-in-core trap will be Invoked 
which will cause the KA10 to take special action. 

10.3.1.2 Limiting the Size of the User Address Space 

The pager contains a register called the Address Limit Reg- 
ister (A.L.R.) which is capable of restricting the legal 
USER mode virtual addresses to the first 16K, 32K, 48K, 
64K, 80K, 96K, 112K or the entire 256K. 

10.3.2 The Core Status Table 

Whenever an associative register is successfully loaded, a 
word in the core memory status table is updated. This table 
contains an entry for every page of real core in the system. 
An entry contains information about that page related to: 
the relative amount of time the page has been in core (con- 
tained in a 9 bit pager register called A.G.E.R.— AGE Reg- 
ister) , whether the page has been written into (the modification 
bit), and which processes (of a subset of all processes 
existing in the system) have referenced the page. The par- 
ticular processes referencing a page are identified by bits 
in the process use. field of the entry. These bits are 
updated by the contents of a 26 bit pager register called 
P. U.R.— Process Use Register. 

The use of the core status table (C.S.T.) causes one additional 
read-modify-write cycle of overhead (while referencing the 
C.S.T.) in the self-loading sequence. 

The modification bit and write permission bits at the A.R, are 
handled in a slightly complicated way. The modification bit 
is set only if the memory request which initiated the loading 
of an A.R. was a write or read-modify-write cycle. The mod- 
ification bit is never cleared by the pager. If an A.R. is 
loaded due to a non- write request, the write permission bit 
of the A.R. is not set regardless of whether writes are per- 
mitted by the page table entry unless the page has already 
been modified (indicated by the modification bit already set 
from some previous operation) and write permission is specified 
by the page table entry. 
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A.R. write permit «- PT write permit A (WRRQ V modification bit) 
^ew modification bit +» old modification V (WRRQ A PT write permit), 

As special aid for the control of shared pages, a pager trap 
is generated if the three high order bits of the page age field 
in the C.S.T. entry are all 0Ms. This provides a way for the 
core manager to defer use of a particular real core page while 
the page's state is being tested or changed. 

The core status table starts at absolute real core location 
^{Wg. A diagram of the table and its use by the pager is 
shown in Figure 10-3. 
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Absolute Core Location 

(Start of Table) 
4000 



8 A 



Dispatched into by 
Real Core Page 
Number 



CORE STATUS 
TABLE 



vvvv 




Ak_ 



Absolute Core ' 
Location / 
lOOOOo (highesj, 
address to which 
table can extend if 1024K real memory is used) 



\ 



\ 



\ 



/ 



/ 



10 



Core Status Table Entry 



35 



9 Bits 
page age 




26 
process use bits 



modification bit 



9 Bits 



26 Bits 







W 



35 



AGER 
Register 



PUR 
Register 



1. Bits - 8 of AGER replace Bits - 8 of CST entry 

2. Bits 10 - 35 are "ORed" into Bits 10 - 35 of CST 
entry. 

3. Write request level is "ORed" into Bit 9 of the 
CST entry (if the write is permitted). 



Figure 10-3 
Pager References to the Core Status Table 
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10.3.3 Shared Page Pointer 

The Shared Page Pointer entry in the P.T. is used for the 
most commonly shared pages in the system. This type of ^ 
entry is detailed in Figure 10-4. ^ 

^> 
Entry Code pi, Shared Page Pointer 



Read 
Write 
Execute 




Directed Traps and Loading Ir 



13 14 



4 5 6 



^L^ 




26 27 



*| Shared Page 
Number 13 bits 



Unused * 



— Access permission bit 

Trap to Monitor- -ll=trap immediately 

10=trap after loading 

A.R. 
Pl=and PP = don't trap 



Trap on write or read- 
modify-write reference 
(useful to make private 
copy of a page) 

Trap to User bit 



Figure 10-4 Shared Page Pointer 

The Shared Page Number/field is used as a dispatch into the 
Special Pages Table (S.P.T.) which starts at absolute core 
location 20 ,0PJJo. The contents of the specified S.P.T. entry 
contains the page location information in bits 14-35 in the 
same format as a private P.T. entry bits 14-35. (see section 
10.3.1.1). 
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10.3.4 Indirect Page Pointer 

The Indirect Page Pointer entry in the P.T. is used for 
uncommonly shared files or processes or for indirectly 
referencing the dynamic address space of a file or process 
which is expected to change. This type of entry is de- 
tailed in Figure 10-5. 



Entry Code 10, Indirect Page Pointer 



Read 






Write 
Execute 



Directed Traps and Loading Information 



12 3^56 




26 27 



35 



Page Table Number 
13 bits 



Page Number 
9 bits 



Access permission bit 



-Trap to Monitor--ll=trap immediately 

10=trap after loadin 

A.R. 
01=and 00 = don't 

trap 

Trap on write or read- 
modify-write reference 
(useful to make private 
copy of a page) 



Trap to User bit 



Figure 10-5 Indirect Page Pointer 
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The Page Table Number (P.T.N.) Is used as a dispatch Into 
S.P.T. to fetch an entry which contains the location in 
bits 14-35 (see section 10.3.1.1) of the indirect page 
table. The Page Number Field of the Indirect Page Pointer 
is used as a dispatch into the Indirect Page Table. The 
specified entry of this table can be any of the three page 
table entry types just described. An attempt to use indi- 
rect page pointers to a depth of more than 2 will result 
in a pager trap. 

The access permission finally granted via Indirect Page 
Pointer mapping is the "AND" of the R,W,X bits and other 
access permissions starting with the first Indirect Page 
Pointer down through all P.T. entries until the destination 
page is found. This generally results in a reduction of 
the final access granted. 

10.3.5 Summary of P.T. Entry Types 

All three page table entry types have the virtue that the 
actual location of a page is kept in only one place instead 
of being replicated in many page tables (for example). 
Detailed examples of the three P.T. entries are presented 
in Figure 10-6. 
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10.4 EXEC Mode Mapping 

EXEC Mode mapping is really quite similar to USER Mode mapping. 
The major difference being that four distinct areas of the 
EXEC Mode address space are separately mapped and mapping of 
the "Resident Monitor" is separately enabled. These four areas 
are shown in Figure 10-7. 







32K 

64K 



19 2K 
256K 



Resident Monitor Code 

Mapping Optional 
(normally not invoked) 



Mapped Individually 
per KA10 processor 



Swappable Monitor 
Code 



Mapped Privately 
per process 



Figure 10-7 Exec Mode Address Space 



The associative mapping process is exactly the same for EXEC 
mode as USER mode. However, most of the page table (for the 
self-loading sequence) for the EXEC mode address space is 
fixed in absolute addresses. Namely: 

Optional Resident Monitor Map 300T0g to 3077 Q 
(Not used unless Resident 
Monitor Mapping is turned on) 



First KA10»s Map 

Second KA10 r s Map 

Common Swappable Monitor Map 



3W 8 to 3177 8 
37P0 8 -to 3777 g 
3200 8 to 3577 8 



absolute 
Real Core 
locations 
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The area that is mapped privately per process is actually 
mapped by an area of the special overhead page associated 
with each process called the Process Storage Block (P.S.B.). 
The address of the P.S.B. is specified by the contents of 
an 11 bit pager register called the Monitor Base Register 
(M.B.R.). Only the highest 128 words of the P.S.B. are used 
for mapping purposes. The remainder is used for process 
specific temporary storage, stacks, and 2 more words are 
used by the pager. Thus locations 600o - 111 o of the P.S.B. 
map the highest 64K of the EXEC mode address Space. 
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10 .5 Invoking the USER Address Space With the KAlff in EXEC Mode 

There are two classes of Instruction modifications which were 
made to the KA10 to enable the system to make references to 
parameters In the user's address space when the machine is In 
EXEC mode . 



10.5.1 UMOVEx 

The first class of instruction modifications is the UMOVEx 
set which forces MOVEs to and from USER space. 



UMOVE 



User Map Move 



100 



M 



A 



6 7 '8 9 12 13 14 



17 18 



35 



Move one word from the source to the destination specified by 
Mj using the user address map. The source is unaffected, the 
original contents of the destination are lost. 



UMOVE 
UMOVEI 
UMOVEM 
UMOVES 

These inst 
to Invoke 
mation int 
provides a 
using indi 
Of course, 
choice of 
through th 



User Move 

User Move Immediate 
User Move to Memory 
User Move to Self 



100 
101 
102 
10 3 



ructions provide a conve 
the USER address mapping 
o the USER address space 

way for the monitor to 
rect addressing through 

indexing and AC referen 
USER map /EXEC map. Howe 
e USER AC's are handled 



nient way for the monitor 
to fetch or store infor- 
( UMOVE or UMOVEM). UMOVEI 
do address computation 
the USER address space, 
ces are not affected by the 
ver, addresses which indirect 
specially (see section 10.5.3) 



10.5.2 



XCT AC, E 



The next instruction change is a modification to the XCT 
instruction to use the AC Field (formerly ignored) to affect 
which map Is used. 

The AC field is interpreted as shown in Figure 10-8. If the 
specified bit is on, use of USER address space is forced for 
any of the conditions indicated. 
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AC Field 



Data Fetch, 
Byte Pointer 
Fetch, 
Pd^ Stack, 
Push Memory, 
r From T of 
BLT 



Address 

Computation 

From 

Byte Pointer 



Data Store, 
Byte 

Fetch/Store , 
Push Stack, 
Pop Memory, 
f To T of BLT 



10 



11 



12 



Bit 



Figure 10-8 XCT AC bits 



The instruction to be executed is always fetched from monitor 
space. To BLT a data block from a user location specified in 
AC left, 



HRRI AC, FIRST 

XCT 4, [j3LT AC, LAST) 



FIRST: BLOCK N 

LAST = .-1 

To BLT a data block into a user region specified by the first 
and last user locations in AC left and right respectively, 

HRRM AC, INSTR 
HLR AC, AC 
HRLI AC, FIRST 
XCT 11, INSTR 



7 June 70 BBN PROPRIETARY 10-16-4 

INSTR: BLT AC, 
PIRST: BLOCK N 

XCT 15, INSTR can BLT data from one place to another in the 
user's address space. (Useful for zeroing out a region) 

To transfer a series of bytes specified by a user byte 
pointer in AC, 

LP: XCT 3, [iLDB AC2, ACJ 
(or (iDPB AC2, ACQ ) 
UMOVEx AC, E Is equivalent to XCT 15, [mOVEx AC, E~] 
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10 . 5 . 3 Call From Monitor Flag (PC Flap; Bit 7) 

Bit 7 of the PC flags word is used to store the state of a 
flip flop named CALL FROM MONITOR. This bit is saved and 
restored in the same fashion as the other PC flag bits. It 
is cleared by MR START, and set whenever an EX JSYS (ef- 
fective address<1000) is executed In EXEC mode. This bit 
indicates to the called JSYS routine that effective addres- 
ses, byte pointers, and BLT pointers passed as arguments 
should refer to the EXEC mode address space, not the cur- • 
rent USER address space. When this bit is on, special 
XCT and UMOVEX references are automatically forced into 
the EXEC mode address space instead of the USER f s space. 

This feature simplifies the coding of EX JSYS routines 
which accept pointers as arguments and which may be called 
either from USER mode or EXEC mode. The routine merely 
makes use of any pointers with UMOVEx, or special XCT 
instructions, and the CALL FM MON flag automatically forces 
references into the correct address space. 
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10 . 5 - ^ Forced References to USER Space Locations 0-17 q 

A 5 bit AC BASE REGISTER exists in the pager to provide an 
independent mapping mechanism for saved accumulators. This 
special mapping process to reference saved AC's is invoked 
by forced references to USER space (UMOVEX or special XCT) 
with addresses < 20n. 

During the mapping process, the low 4 bits are taken from 
the virtual address, the next 5 bits (27-31) are supplied 
from the AC BASE REGISTER, the top 9 bits (18-26) are 
forced to 775, and EXEC mode addressing is forced. This 
intermediate virtual address is then passed to the pager 
for mapping in the standard fashion. This means that the 
saved accumulators are mapped into one of 32 blocks, (selected 
by the AC BASE REGISTER) each 16 wcrds long, located in 
page 775 of the EXEC mode virtual address space. (Recall 
this page is mapped privately per process). 

This space is ordinarily used as a stack of saved AC's. 
Upon entry to an EX JSYS which is pseudo-Interruptable , 
the AC T s are BLT'ed into this save region. The EX JSYS 
then references its own AC T s in the normal fashion, and the 
AC's saved from the calling program via UMOVEX and XCT 
instructions with forced user space effective addresses 
<20n. Pointers passed from the calling program which orig- 
inally pointed into the AC T s are evaluated with UMOVE or 
special XCT instructions, and automatically reference 
these saved AC's. This feature operates in the same- 
fashion whether the calling program was USER mode or EXEC 
mode, i.e. the CALL FM WON flag forces special references 
_>20n into the EXEC mode space, but special references <20g 
go into the saved AC stack independent of this flag. 

A side effect of this feature is that forced references 
<20n in USER mode reference the user's shadow core. (The 
first 20n locations of the user's page zero). 
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10.6 Pager Traps 

A paging trap will occur whenever one of the following 
events happens : 

1. The trap bits in the process page table 
force a trap. 

2. The addressed page (or indirecting page , 
table) is not in core. 

3. An illegal condition is detected. 

^ . The Core Status Table entry for an ad- 
dressed page contains an age with the 
three highest bits = 0. 

When one of the above conditions happens, the pager first 
stores the cause and location of the trap into the P.S.B. 
at location 571o. The format of this word is shown in 
Figure 10-9. Then, if the APR operation in progress was 
a write, it stores the data into location 572o of the P.S.B. 
Finally, it forces the APR to execute absolute location 
70o (170o if second APR). Location 70o should contain a 
JSYS instruction to a trap routine. 

The arrangement of the Trap Cause field was chosen so that 
decoding of the cause could be easily accomplished by the 
JFFO instruction. 

To restart a process which was terminated by a pager trap, 
the following information is of value: 

1. The program counter (PC) saved by the JSYS 
at location 70g is correct. 

2. If the read or execute bits in 571o of the 
P.S.B. are set, restart is completed by 
performing a JRSTF % through the PC word 
saved by the JSYS at location 7#g (17Pq). 

3. If the read bit is not set but the write 
bit is set in 571o of the P.S.B., the data 
in 572g of the P.S.B. must be written into 
the address in 571o of the P.S.B. before 
returning control So the process via JRSTF. 



7 June 70 



BBN PROPRIETARY 



10-20- lj 



A sample program to restart a process which was terminated 
by a paging trap Is given below: 



BEGIN: 



cono pgr, gr 

MOVE 1, 777571 
TLNE 1, 12 

JRST BEGIN 
MOVE 777572 
TLNE 1, 1 
JRST MONWR 
UMOVEM (1) 
HRLZI 17, 777520 
BLT 17, 17 
JRSTF (§777573 



;LOAD PAGER WITH NEW BASE REGISTERS, 
ETC. (see section 10.7 for details) 



;GET TRAP STATUS WORD 

;SKIP IF NEITHER READ NOR EXECUTE 
;BITS SET 



ifft 



■t 



A> 



MONWR: MOVEM (1) 
JRST BEGIN 



;GET DATA WORD ^ U> ^ 
;SKIP IF USER MODE 

; COMPLETE USER MODE WRITE 

; RESTORE AC's FOR THE PROCESS 

; RESUME PROCESS (JSYS IN LOCATION 7Pg 
;SAVES THE FLAGS AND PC IN 777573). 
; COMPLETE MONITOR MODE WRITE 



Figure 10-1 shows that the PI cycle, Key Cycle, and Indirect 
Address Fetch levels are provided to the pager. The reason 
for the PI cycle and KEY cycle bits is to distinguish traps 
of the running program from PI and KEY cycle traps (KEY cycles 
occur when the console EXAMINE, DEPOSIT, or XCT switches are 
pushed). The Trap Status V/ord in Figure 10-9 contains suf- 
ficient information to simulate a KEY cycle operation and 
recover from the trap provided timing is not critical (e.g. 
BLKO or BLKI to magtape or dectape might get data late in- 
dications). However, a pager trap during a PI cycle should 
never occur and is a disaster so recovery is Impossible. The 
running program can be continued after such a trap by JRSTF 
0777573 as In the sample restart program. The indirect address 
sequence bit is used to distinguish data reads of non-existent 
memory from Indirect addressing reads of non-existent memory. 
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In the former case, the software may wish to create a "new 
memory page" and proceed, but in the latter case, a prog- 
ramming error has been made. 

Another interesting feature of the pager is the monitor 
after-loading trap. All other directed traps take place 
at the beginning of the self-loading sequence, before any 
associative register has been loaded with mapping information 
for the new page, but the after-loading trap takes place at 
completion of the self-loading sequence. This enables the 
Monitor to perform statistics-taking operations for specified 
pages each time one is loaded into an associative register. 
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TRAP STATUS WORD 
8 9 10 



T T 

1 



9 Bits 



V 



1 



18 Bits 



V 



Effective Address of Request 



V 



v 



V 



v 



EM (Exec Mode) 

E (Execute request) 

W (Write request) 

.^ R (Read request) 

I (Indirect address sequence in progress) 

PI (Priority Interrupt cycle in progress) 

KEY ( KEY cycle in progress — console Examine, 
XCT 5 or deposit switch pushed) 



Non-EX-MEM 
Parity Error 



Figure 10-9 



Bits 0-8, trap cause are decoded as follows: Bits and 1 
define one of four groups each defined below: 

Group 0: TSR 0, 1 = 00 



Bit 


Meaning if ON 


2 

3 
4 

5 
6 


AGE = 00X "") 

AGE = 02X L as ^ad from 

AGE = 04X \ . C - S - T - 

AGE = 06X ^J 

Monitor After-Loading A.R. trap 
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3 

5 
6 

7 

8 

Group 2 

Bit 

2 
3 

i* 

5 
6 

7 

8 

Group 3 
Bit 



(in 2nd or 3rd 
page table) 



TSR 7, 1 = 01 

Meaning if on 

Shared not in core 

page table not in core (p. t. 2) 

2nd indirect, private not in core (p.t. 3) 

Indirect shared not in core (p.t. 2 or p.t. 3) 

Indirect page table not in core (p.t. 3) 

Excessive Indirect pointers (>2) 

TSR pr, 1 = 10 

Meaning if on 

Private Not in core 

Write copy trap (bit 9 in P.T.) 

User trap (bit 8 in P.T.) 

Access trap (P.T. bit 12 = or bits 10-11=3) 

Illegal Read or Execute 

Illegal Write 

Address Limit Register Violation or P.T. bits 

0,1=3 (illegal format) 

TSR 0, 1 - 11 

Meaning if on 

Private Not in core 

Write copy trap (bit 9 in P.T.) 

User trap (bit 8 in P.T.) 

Access trap (P.T. bit 12 = or bits 10-11=3) 

Illegal Read or Execute 

illegal Write 

Address Limit Register Violation or P.T. bits 

0,1=3 (illegal format) 
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10.7 Controlling the Pager via I/O Buss CONO's 

The IOB reset pulse generated by the APR causes the pager 
to completely clear itself. In the cleared state no map- 
ping is performed by the pager and all memory requests 
are passed unchanged to the memory buss. The pager is 
assigned device mnemonic PGR (device number 24) and int- 
erprets the three low bits of CONO PGR, X as described 
below. Other bits of the CONO are ignored. 

CONO PGR, Clears all associative registers 

and reloads the Monitor and User 
mode base registers and Address 
Limit Register from location 71 
and the Core Status age and process 
use registers from location 72. 
(see Figure 10-10) 

Clears all associative registers 
mapping EXEC mode pages. 

Clears the associative register 
mapping the page addressed by the 
next write (or re ad-modi fy-write) 
memory reference. The Pager op- 
erates in the normal manner both 
before and after this write ref- 
erence but does not complete the 
write operation. 

Note that because a priority interrupt may occur between the 
execution of this CONO and the following write instruction, 
it is normally required to do the following: 



CONO PGR, 1 



CONO PGR, 2 



CONO PI, km 
CONO PGR, 2 
MOVSM PAGE*100T0 
CONO PI, 200 



;TURN OFF PI SYSTEM 

; CLEAR PAGE OF NEXT WRITE 

; CLEAR PAGE 

;TURN PI SYSTEM BACK ON 



CONO PGR, 3 
CONO PGR, 4 



Clears all associative registers 
mapping USER mode pages 

Turns off all mapping, leaving base 
registers and associative registers 
unchanged 



CONO PGR, 5 



is equivalent to CONO PGR, 4 
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CONO PGR, 6 



CONO PGR, 7 



Turns off mapping for resident 
monitor (virtual addresses 
20~77777 8 ) and turns on USER 
mode mapping and mapping of 
EXEC space 100000 - 777777 

8 8 
Turns on mapping for all address 
20 o - 777777o for both EXEC mode 
ana USER mode references 
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10-26-4 



CONOPGR, 



causes the Pager to reload its 
main registers as follows: 



1. Read absolute location 71 
interpreted as below. 

3 4 6 7 17 



g. (171g if second APR), 
18 22 23 24 25 



35 



xxxx 



11 bits 



5 bits 



xx 



11 bits 







I 



V 



AC Base 
Register 



MBR (Monitor Base 
Register) Location 
of the Process Sto- 
rage Block. 



\!/ 



UBR (User Mode Base Register) 
The location of the User Mode 
page table. 



ALR (Address Limit Register) 
Limits Legal USER mode virtual 
addresses to the first 16K, 
32K, 48K, 64K 3 80K , 96K, or 
112K. 



2. Read location 72o (172o if second APR) 



000 


=s 


No restriction 


001 


=r 


112K restriction 


010 


= 


96K restriction 


011 


— 


80K restriction 


100 


= 


64K restriction 


101 


= 


48K restriction 


110 


=r 


32K restriction 


111 


= 


16K restriction 



10 



35 



U^3 



9 bits 



26 bits 



I 



V Not Used 

AGER (AGE Register) 



PUR (Process Use Register) 



Figure 10-0 
Initializing the Pager For Running a New Process 
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Glossa ry 

A.G.E.R. AGE Register 

A.L.R. Address Limit Register 

A.P.R. Arithmetic Processor (KA10) *, 

A.R. Associative Register 

C.S.T. Core Status Table 

M.B.R. Monitor Base Register 

PGR £ a ^ e 2. device mnemonic 

P.S.B. Process Storage Block 

P.T. Page Table 

P.T.N. Page Table Number 

P.U.R. process Use Register 

R.C.A. Real Core Address 

S.P.N. Shared Page Number 

S.P.T. Special Pages Table 

U.B.R. User Mode Base Register 



